CVE-2026-31694-POC

CVE-2026-31694: Desbordamiento de escritura en caché de readdir de FUSE Una verificación de límites faltante en fs/fuse/readdir.c:fuseadddirenttocache. Un servidor FUSE devuelve una entrada de directorio con namelen = 4095, que se serializa en un registro de 4120 bytes. El kernel lo copia en una...

Linux Distros Unpatched Vulnerability : CVE-2026-80857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: wait for FRFINISHED on abortonkill to prevent use-after-free The abortonkill path in requestwaitanswer calls fuseabortconn and returns without waiting for...

Linux Distros Unpatched Vulnerability : CVE-2026-80858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with...

Linux Distros Unpatched Vulnerability : CVE-2026-80859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized,...

Linux Distros Unpatched Vulnerability : CVE-2026-64266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but does not re-lock it before returning. fusechanabort can end the...

Linux Distros Unpatched Vulnerability : CVE-2026-64265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request...

Linux Distros Unpatched Vulnerability : CVE-2026-64267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payloa...

Linux Distros Unpatched Vulnerability : CVE-2026-53311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix uninit-value in fusedentryrevalidate fusedentryrevalidate may be called with a dentry that didn't had -dtime initialised. The issue was found with...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

Linux Distros Unpatched Vulnerability : CVE-2025-39888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported a slab-out-of-bounds Write in...

The vulnerability in the implementation of the FUSE file system in Linux kernel allows a hacker to induce a service failure.

The vulnerability of the FUSE file system implementation in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created program...